Quick answer: A keystone jack is a female RJ45 socket that clips into a 14.5 by 16 mm rectangular opening in a wall plate or patch panel, with insulation displacement contacts on the back for solid cable. The jack has to match the cable category: Cat6a needs 500 MHz contacts, tighter pair spacing and usually a shielded housing, while a Cat6 jack will pass a Cat6a link at short lengths and fail the permanent link test at 90 m. Wiring follows T568A or T568B, and both ends of a cable must use the same pattern.
Most failed permanent links on a new installation are not cable faults. They are jacks punched with too much untwisted pair, jacks of the wrong category, or a T568A end mated with a T568B end. All three pass a continuity tester and all three fail a certification test, which is why the jack deserves as much attention as the drum of cable.
What the jack actually is
Front contacts and rear IDC
The front is an eight-position modular socket with phosphor bronze contacts that mate with a plug. The rear is a row of insulation displacement contacts, usually arranged as a 110 block, where a punch-down tool presses the solid conductor into a slotted terminal that cuts the insulation. Stranded patch cable does not belong in these terminals: the strands deform, the contact relaxes and the link becomes intermittent after a few years.
Why category matters at the jack
Crosstalk is generated where the pairs run closest together, and in a jack that is the terminal area. Cat6 jacks stagger the contacts and add compensation; Cat6a jacks add a metal housing and a tighter pair separation to control alien crosstalk between adjacent jacks in the same plate. Fitting a Cat6 jack to Cat6a cable leaves the link limited by the cheapest component.
Punch-down and the two wiring patterns
T568A and T568B
T568B assigns white-orange and orange to pins 1 and 2, white-green and blue to 3 and 6, white-blue and green to 4 and 5, and white-brown and brown to 7 and 8. T568A swaps the green and orange pairs. Electrically both are identical for Ethernet; the difference matters for legacy voice wiring and for consistency. Choose one pattern for the site and label it inside every plate.
Untwisting and pair management
Keep the untwisted length under 13 mm at a Cat6 jack and under 6 mm for Cat6a. That is measured from the jacket to the terminal, and it is the single easiest way to fail a link that otherwise has good components. Leave the jacket inside the strain relief, dress the pairs around the centre, and do not comb them straight before punching.
Matching jack to cable
| Category | Bandwidth | Jack | Max untwist |
|---|
| Cat5e | 100 MHz | Unshielded, 8P8C | 13 mm |
| Cat6 | 250 MHz | Compensated contacts | 13 mm |
| Cat6a | 500 MHz | Shielded, metal housing | 6 mm |
| Cat8.1 | 2000 MHz | Shielded, 30 m channel | 6 mm |
Where installations fail
Three faults repeat. The first is a jack of the right category punched with 25 mm of untwisted pair, which shows up as near-end crosstalk failing at high frequency while everything else passes. The second is a shielded jack used with unshielded cable, leaving a floating drain that acts as an antenna. The third is a plate with four jacks side by side, where alien crosstalk between neighbours is worse than the link itself at 10GBASE-T.
Test with a permanent link adapter, not a channel adapter, because the permanent link is what you are certifying; patch cords are tested separately. A RJ45 connector overview covers the plug side, the Cat6a cable page covers the cable construction that the jack has to match, and the Ethernet patch leads guide covers the cords that complete the channel.
Practical scenarios
- Office fit-out with Cat6a cable: specify shielded Cat6a jacks, bond the drain to the plate, and test 10 percent of links at 500 MHz before accepting the job.
- Home office with a single run: a Cat6 jack and Cat6 cable is enough for 2.5G; buying Cat6a jacks without shielded cable adds cost and no benefit.
- Retrofit into an existing plate: check the opening is a true keystone, because some modular plates use a proprietary clip that will not hold a standard jack under cable tension.
- PoE camera at the end of a run: use a jack rated for the current and keep the punch-down dry; moisture ingress at an outdoor plate corrodes the IDC before the cable fails.
- Patch panel in a small rack: punch with the panel removed from the rack, because the leverage on a bench is what keeps the untwisted length short and the terminals undamaged.
FAQ
Does T568A or T568B matter for speed?
No. Both patterns connect the same four pairs to the same pins; the only difference is which pair lands on pins 1 and 2. Speed depends on the cable, the jack and the installation quality. Mixing the two patterns at opposite ends of one cable is what causes a fault, because the pairs no longer match.
Can I use a Cat6 jack with Cat6a cable?
It will work at gigabit and often at 2.5G, but it cannot pass a Cat6a permanent link test because the jack is only characterised to 250 MHz. If the run is being certified for 10GBASE-T, use Cat6a jacks throughout or accept that the channel is limited to Cat6 performance.
Why does my punch-down tool keep breaking jacks?
Most likely the blade is set for 110 blocks while the jack uses a different terminal, or the tool is being struck rather than squeezed. Use the low-impact setting, trim the excess conductor with the built-in cutter in the same motion, and check that the jack is supported from behind so the housing does not flex.
